Van Eck Phreaking
   HOME

TheInfoList



OR:

Van Eck phreaking, also known as Van Eck radiation, is a form of
eavesdropping Eavesdropping is the act of secretly or stealthily listening to the private conversation or communications of others without their consent in order to gather information. Etymology The verb ''eavesdrop'' is a back-formation from the noun ''eaves ...
in which special equipment is used to pick up side-band electromagnetic emissions from electronic devices that correlate to hidden signals or data to recreate these signals or data to spy on the electronic device. Side-band electromagnetic radiation emissions are present in (and with the proper equipment, can be captured from) keyboards, computer displays, printers, and other electronic devices. In 1985, Wim van Eck published the first unclassified technical analysis of the security risks of emanations from
computer monitor A computer monitor is an output device that displays information in pictorial or textual form. A discrete monitor comprises a visual display, support electronics, power supply, housing, electrical connectors, and external user controls. The di ...
s. This paper caused some consternation in the security community, which had previously believed that such monitoring was a highly sophisticated attack available only to
governments A government is the system or group of people governing an organized community, generally a state. In the case of its broad associative definition, government normally consists of legislature, executive, and judiciary. Government is a ...
; van Eck successfully eavesdropped on a real system, at a range of hundreds of
metre The metre (British spelling) or meter (American spelling; see spelling differences) (from the French unit , from the Greek noun , "measure"), symbol m, is the primary unit of length in the International System of Units (SI), though its pref ...
s, using just $15 worth of equipment plus a
television Television, sometimes shortened to TV, is a telecommunication medium for transmitting moving images and sound. The term can refer to a television set, or the medium of television transmission. Television is a mass medium for advertisin ...
set. As a consequence of this research, such emanations are sometimes called "van Eck radiation", and the eavesdropping technique van Eck phreaking. Government researchers were already aware of the danger, as
Bell Labs Nokia Bell Labs, originally named Bell Telephone Laboratories (1925–1984), then AT&T Bell Laboratories (1984–1996) and Bell Labs Innovations (1996–2007), is an American industrial research and scientific development company owned by mult ...
had noted this vulnerability to secure
teleprinter A teleprinter (teletypewriter, teletype or TTY) is an electromechanical device that can be used to send and receive typed messages through various communications channels, in both point-to-point and point-to-multipoint configurations. Initia ...
communications during
World War II World War II or the Second World War, often abbreviated as WWII or WW2, was a world war that lasted from 1939 to 1945. It involved the vast majority of the world's countries—including all of the great powers—forming two opposin ...
and was able to produce 75% of the plaintext being processed in a secure facility from a distance of 80 feet (24 metres). Additionally, the NSA published ''Tempest Fundamentals, NSA-82-89, NACSIM 5000, National Security Agency'' (Classified) on February 1, 1982. Also, the van Eck technique was successfully demonstrated to non-TEMPEST personnel in
Korea Korea ( ko, 한국, or , ) is a peninsular region in East Asia. Since 1945, it has been divided at or near the 38th parallel, with North Korea (Democratic People's Republic of Korea) comprising its northern half and South Korea (Republic o ...
during the
Korean War , date = {{Ubl, 25 June 1950 – 27 July 1953 (''de facto'')({{Age in years, months, weeks and days, month1=6, day1=25, year1=1950, month2=7, day2=27, year2=1953), 25 June 1950 – present (''de jure'')({{Age in years, months, weeks a ...
in the 1950s. While
phreaking Phreaking is a slang term coined to describe the activity of a culture of people who study, experiment with, or explore telecommunication systems, such as equipment and systems connected to public telephone networks. The term ''phreak'' is a ...
is the process of exploiting
telephone network A telephone network is a telecommunications network that connects telephones, which allows telephone calls between two or more parties, as well as newer features such as fax and internet. The idea was revolutionized in the 1920s, as more and more ...
s, it is used here because of its connection to eavesdropping. Van Eck phreaking of CRT displays is the process of
eavesdropping Eavesdropping is the act of secretly or stealthily listening to the private conversation or communications of others without their consent in order to gather information. Etymology The verb ''eavesdrop'' is a back-formation from the noun ''eaves ...
on the contents of a CRT by detecting its
electromagnetic In physics, electromagnetism is an interaction that occurs between particles with electric charge. It is the second-strongest of the four fundamental interactions, after the strong force, and it is the dominant force in the interactions of a ...
emissions Emission may refer to: Chemical products * Emission of air pollutants, notably: **Flue gas, gas exiting to the atmosphere via a flue ** Exhaust gas, flue gas generated by fuel combustion ** Emission of greenhouse gases, which absorb and emit rad ...
.


Basic principle

Information that drives the
video display A display device is an output device for presentation of information in visual or tactile form (the latter used for example in tactile electronic displays for blind people). When the input information that is supplied has an electrical signal the ...
takes the form of
high-frequency High frequency (HF) is the ITU designation for the range of radio frequency electromagnetic waves (radio waves) between 3 and 30 megahertz (MHz). It is also known as the decameter band or decameter wave as its wavelengths range from one to ten ...
electrical signals. These
oscillating Oscillation is the repetitive or periodic variation, typically in time, of some measure about a central value (often a point of equilibrium) or between two or more different states. Familiar examples of oscillation include a swinging pendulum ...
electric currents An electric current is a stream of charged particles, such as electrons or ions, moving through an electrical conductor or space. It is measured as the net rate of flow of electric charge through a surface or into a control volume. The moving pa ...
create
electromagnetic radiation In physics, electromagnetic radiation (EMR) consists of waves of the electromagnetic field, electromagnetic (EM) field, which propagate through space and carry momentum and electromagnetic radiant energy. It includes radio waves, microwaves, inf ...
in the RF range. These
radio Radio is the technology of signaling and communicating using radio waves. Radio waves are electromagnetic waves of frequency between 30 hertz (Hz) and 300 gigahertz (GHz). They are generated by an electronic device called a transmit ...
emissions are correlated to the
video Video is an electronic medium for the recording, copying, playback, broadcasting, and display of moving visual media. Video was first developed for mechanical television systems, which were quickly replaced by cathode-ray tube (CRT) syste ...
image being displayed, so, in theory, they can be used to recover the displayed image.


CRTs

In a CRT the image is generated by an
electron beam Cathode rays or electron beam (e-beam) are streams of electrons observed in discharge tubes. If an evacuated glass tube is equipped with two electrodes and a voltage is applied, glass behind the positive electrode is observed to glow, due to ele ...
that sweeps back and forth across the
screen Screen or Screens may refer to: Arts * Screen printing (also called ''silkscreening''), a method of printing * Big screen, a nickname associated with the motion picture industry * Split screen (filmmaking), a film composition paradigm in which mul ...
. The electron beam excites the
phosphor A phosphor is a substance that exhibits the phenomenon of luminescence; it emits light when exposed to some type of radiant energy. The term is used both for fluorescent or phosphorescent substances which glow on exposure to ultraviolet or vi ...
coating on the glass and causes it to glow. The strength of the beam determines the brightness of individual
pixel In digital imaging, a pixel (abbreviated px), pel, or picture element is the smallest addressable element in a raster image, or the smallest point in an all points addressable display device. In most digital display devices, pixels are the smal ...
s (see CRT for a detailed description). The electric signal which drives the electron beam is amplified to up to around one hundred volts from
TTL TTL may refer to: Photography * Through-the-lens metering, a camera feature * Zenit TTL, an SLR film camera named for its TTL metering capability Technology * Time to live, a computer data lifespan-limiting mechanism * Transistor–transistor lo ...
circuitry. This high frequency, high voltage signal creates electromagnetic radiation that has, according to Van Eck, "a remarkable resemblance to a broadcast TV signal". The signal leaks out from displays and may be captured by an antenna, and once synchronization pulses are recreated and mixed in, an ordinary analog television receiver can display the result. The synchronization pulses can be recreated either through manual adjustment or by processing the signals emitted by
electromagnetic coil An electromagnetic coil is an electrical Electrical conductivity, conductor such as a wire in the shape of a wiktionary:coil, coil (spiral or helix). Electromagnetic coils are used in electrical engineering, in applications where electric curre ...
s as they deflect the CRT's electron beam back and forth. In the paper, Van Eck reports that in February 1985 a successful test of this concept was carried out with the cooperation of the
BBC #REDIRECT BBC #REDIRECT BBC Here i going to introduce about the best teacher of my life b BALAJI sir. He is the precious gift that I got befor 2yrs . How has helped and thought all the concept and made my success in the 10th board exam. ...
...
. Using a van filled with electronic equipment and equipped with a VHF
antenna array An antenna array (or array antenna) is a set of multiple connected antennas which work together as a single antenna, to transmit or receive radio waves. The individual antennas (called ''elements'') are usually connected to a single receiver ...
, they were able to eavesdrop from a "large distance". There is no evidence that the BBC's
TV detector van TV detector vans are vans, which, according to the BBC, contain equipment that can detect the presence of television sets in use. The vans are operated by contractors working for the BBC, to enforce the television licensing system in the UK, the ...
s used this technology, although the BBC will not reveal whether or not they are a hoax. Van Eck phreaking and protecting a CRT display from it was demonstrated on an episode of
Tech TV Tech or The Tech may refer to: * An abbreviation of technology or technician *Tech Dinghy, an American sailing dinghy developed at MIT *Tech (mascot), the mascot of Louisiana Tech University, U.S. * Tech (river), in southern France * "Tech" (''S ...
's
The Screen Savers ''The Screen Savers'' is an American TV show that aired on TechTV from 1998 to 2005.Fost, Dan (17 May 1999)A Day in the Life of ZDTV's `The Screen Savers' ''San Francisco Chronicle'' The show launched concurrently with the channel ZDTV (later k ...
on December 18, 2003.


LCDs

In April 2004, academic research revealed that flat panel and laptop displays are also vulnerable to electromagnetic eavesdropping. The required equipment for espionage was constructed in a university lab for less than US$2000.


Communicating using Van Eck phreaking

In January 2015, the Airhopper project from
Georgia Institute of Technology The Georgia Institute of Technology, commonly referred to as Georgia Tech or, in the state of Georgia, as Tech or The Institute, is a public research university and institute of technology in Atlanta, Georgia. Established in 1885, it is part of ...
, United States demonstrated (at Ben Gurion University,
Israel Israel (; he, יִשְׂרָאֵל, ; ar, إِسْرَائِيل, ), officially the State of Israel ( he, מְדִינַת יִשְׂרָאֵל, label=none, translit=Medīnat Yīsrāʾēl; ), is a country in Western Asia. It is situated ...
) the use of Van Eck Phreaking to enable a keylogger to communicate, through video signal manipulation, keys pressed on the keyboard of a standard PC, to a program running on an Android cellphone with an earbud radio antenna.


Tailored access batteries

A tailored access battery is a special laptop battery with Van Eck Phreaking electronics and power-side band encryption cracking electronics built-into its casing, in combination with a remote transmitter/receiver. This allows for quick installation and removal of a spying device by simply switching the battery.


Potential risks

Van Eck phreaking might also be used to compromise the secrecy of the votes in an election using
electronic voting Electronic voting (also known as e-voting) is voting that uses electronic means to either aid or take care of casting and counting ballots. Depending on the particular implementation, e-voting may use standalone ''electronic voting machines'' ( ...
. This caused the Dutch government to ban the use of NewVote
computer A computer is a machine that can be programmed to Execution (computing), carry out sequences of arithmetic or logical operations (computation) automatically. Modern digital electronic computers can perform generic sets of operations known as C ...
voting machine A voting machine is a machine used to record votes in an election without paper. The first voting machines were mechanical but it is increasingly more common to use ''electronic voting machines''. Traditionally, a voting machine has been defin ...
s manufactured by SDU in the 2006 national elections, under the belief that ballot information might not be kept secret. In a 2009 test of electronic voting systems in Brazil, Van Eck phreaking was used to successfully compromise ballot secrecy as a proof of concept.


Further research

Markus Kuhn has discovered several low-cost techniques for reducing the chances that emanations from computer displays can be monitored remotely. With CRT displays and
analog Analog or analogue may refer to: Computing and electronics * Analog signal, in which information is encoded in a continuous variable ** Analog device, an apparatus that operates on analog signals *** Analog electronics, circuits which use analog ...
video cables, filtering out
high-frequency High frequency (HF) is the ITU designation for the range of radio frequency electromagnetic waves (radio waves) between 3 and 30 megahertz (MHz). It is also known as the decameter band or decameter wave as its wavelengths range from one to ten ...
components from
fonts In metal typesetting, a font is a particular size, weight and style of a typeface. Each font is a matched set of type, with a piece (a "sort") for each glyph. A typeface consists of a range of such fonts that shared an overall design. In mode ...
before rendering them on a computer screen will attenuate the energy at which text characters are broadcast. With modern
flat panel display A flat-panel display (FPD) is an electronic display used to display visual content such as text or images. It is present in consumer, medical, transportation, and industrial equipment. Flat-panel displays are thin, lightweight, provide better li ...
s, the high-speed digital
serial interface In computing, a serial port is a serial communication interface through which information transfers in or out sequentially one bit at a time. This is in contrast to a parallel port, which communicates multiple bits simultaneously in parallel. T ...
(
DVI Digital Visual Interface (DVI) is a video display interface developed by the Digital Display Working Group (DDWG). The digital interface is used to connect a video source, such as a video display controller, to a display device, such as a comp ...
) cables from the
graphics controller A graphics card (also called a video card, display card, graphics adapter, VGA card/VGA, video adapter, display adapter, or mistakenly GPU) is an expansion card which generates a feed of output images to a display device, such as a computer mo ...
are a main source of compromising emanations. Adding random
noise Noise is unwanted sound considered unpleasant, loud or disruptive to hearing. From a physics standpoint, there is no distinction between noise and desired sound, as both are vibrations through a medium, such as air or water. The difference arise ...
to the
least significant bit In computing, bit numbering is the convention used to identify the bit positions in a binary number. Bit significance and indexing In computing, the least significant bit (LSB) is the bit position in a binary integer representing the binary 1 ...
s of pixel values may render the emanations from flat-panel displays unintelligible to eavesdroppers but is not a secure method. Since DVI uses a certain bit code scheme that tries to transport a balanced signal of 0 bits and 1 bits, there may not be much difference between two-pixel colors that differ very much in their color or intensity. The emanations can differ drastically even if only the last bit of a pixel's color is changed. The signal received by the eavesdropper also depends on the frequency where the emanations are detected. The signal can be received on many frequencies at once and each frequency's signal differs in contrast and
brightness Brightness is an attribute of visual perception in which a source appears to be radiating or reflecting light. In other words, brightness is the perception elicited by the luminance of a visual target. The perception is not linear to luminance, ...
related to a certain color on the screen. Usually, the technique of smothering the RED signal with noise is not effective unless the power of the noise is sufficient to drive the eavesdropper's receiver into
saturation Saturation, saturated, unsaturation or unsaturated may refer to: Chemistry * Saturation, a property of organic compounds referring to carbon-carbon bonds **Saturated and unsaturated compounds ** Degree of unsaturation **Saturated fat or fatty aci ...
thus overwhelming the receiver input.


See also

*
TEMPEST Tempest is a synonym for a storm. '' The Tempest'' is a play by William Shakespeare. Tempest or The Tempest may also refer to: Arts and entertainment Films * ''The Tempest'' (1908 film), a British silent film * ''The Tempest'' (1911 film), a ...
, a United States government standard for limiting electric or electromagnetic radiation emanations from electronic equipment *
RINT C mathematical operations are a group of functions in the standard library of the C programming language implementing basic mathematical functions. All functions use floating-point numbers in one manner or another. Different C standards provid ...
, the acronym for Radiation Intelligence, military application *
Air gap (networking) An air gap, air wall, air gapping or disconnected network is a network security measure employed on one or more computers to ensure that a secure computer network is physically isolated from unsecured networks, such as the public Internet or an ...
*
Near sound data transfer Near Sound Data Transfer (NSDT) is a sound-based mobile transaction technology developed and patented by Tagattitude since 2005. NSDT uses a one time password sent through the audio channel of a mobile device to create an electronic signature enabli ...


References


External links


Van Eck phreaking Demonstration

Tempest for Eliza
is a program that uses a computer monitor to send out AM radio signals, making it possible to hear computer-generated music in a radio.
Video eavesdropping demo at CeBIT 2006
by a Cambridge University security researcher
eckbox
– unsuccessful or abandoned attempt in spring 2004 to build an open-source Van Eck phreaking implementation
Sniffing wireless keyboard link

system-bus-radio
– an implementation of Van Eck phreaking using certain processor instructions on a general purpose computer {{DEFAULTSORT:Van Eck Phreaking Surveillance Phreaking 1985 in science Telecommunications-related introductions in 1985